cftl_order_save() needs capability check and nonce